$ rpki-client -vvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft File: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft (raw, json) Hash identifier: exGSb0pH6n4CQwGQMhaaIn7DJwnVXUIc8bojW985iIY= Subject key identifier: C4:21:22:E2:C4:87:58:36:96:01:DE:EB:7A:1A:9B:DA:23:D3:D4:79 Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E Certificate issuer: /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft Manifest number: 04EF Signing time: Thu 23 May 2024 01:14:05 +0000 Manifest this update: Thu 23 May 2024 01:14:05 +0000 Manifest next update: Thu 30 May 2024 01:14:05 +0000 Files and hashes: 1: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl (hash: XfatMofaGMeEgK7lB7KuxDl97xRFoJyvbtlqeviLLx4=) 2: F2004572BAED11ECA89EC43AC4F9AE02.roa (hash: o9PB+UobyP+l5eMcB8QbwCGSAygZt597MmAdTrie4ro=) 3: 3D3D3166A8C511EC8F560C42C4F9AE02.roa (hash: VEAQPLTal19gRup4Wp6oHPBjzDcoHYnNrcfhJsSHTyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 00:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E Validity Not Before: May 23 01:14:05 2024 GMT Not After : May 30 01:14:05 2024 GMT Subject: CN=664e985d-028e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:35:71:ef:39:18:f9:d1:87:9c:14:ca:6d:8e: 23:55:ba:18:47:a4:c9:f2:2b:c9:89:a7:20:a0:7d: 5c:9d:af:4e:0e:57:d6:ca:31:d0:65:9b:39:45:73: c2:99:17:4b:f6:34:a9:7f:72:26:b1:6b:0b:05:47: 0a:9b:b0:80:5f:07:d6:f7:f3:0a:b1:b7:e6:13:f9: d3:c3:72:6d:f6:3b:af:c4:2a:c8:3d:b4:83:0d:25: 0b:52:b6:88:cc:c5:b2:55:ea:ad:30:6e:29:e3:8d: 42:6a:16:38:c0:c1:02:11:39:41:1e:67:f8:e4:1e: dc:00:1b:fd:c1:f0:7e:3f:52:3c:5f:82:b9:8a:39: ad:7b:1e:47:79:44:0e:4e:1d:cf:38:72:5e:e1:61: bc:ef:b0:67:a3:0e:a4:d3:db:b0:f6:b5:55:89:f0: 29:d9:f9:64:da:12:70:28:db:af:1e:5c:f4:8c:1d: 81:24:6c:a2:30:23:b3:63:03:69:0d:9c:0c:a7:f4: 16:f5:d9:e4:ce:12:3b:60:a8:86:42:ee:52:f8:a8: 67:b1:10:18:8f:e3:ad:57:f9:7f:58:b0:c5:df:0e: e9:60:cf:e6:04:63:f3:2c:e4:e2:49:ad:0a:37:2e: df:e4:e2:bb:f8:62:15:f4:41:45:ed:a0:26:e1:b9: 6c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:21:22:E2:C4:87:58:36:96:01:DE:EB:7A:1A:9B:DA:23:D3:D4:79 X509v3 Authority Key Identifier: keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:e5:99:1b:33:36:a6:9d:42:6a:93:09:22:2b:5d:0f:68:f4: 0c:49:d9:a0:67:da:e0:3f:e0:8c:03:15:67:86:f7:fd:dd:25: 51:e2:97:ff:36:be:d2:e9:bc:04:70:ac:72:2a:f5:4b:df:d6: a8:98:69:8a:9c:e3:1d:ae:6d:4a:a9:44:75:35:c4:be:7f:26: e4:e1:ff:e6:8a:8e:53:a7:f9:c3:a6:c5:d1:3f:de:b7:f6:8f: ae:19:ae:63:0e:cf:aa:ec:bd:b4:20:55:34:14:0f:f6:7c:24: 0c:60:a8:37:64:ac:55:33:55:8a:31:85:67:39:c9:fe:5c:b0: a3:c6:a3:1f:c4:75:96:ff:07:32:13:1f:02:81:4f:73:ee:74: 76:e6:2a:a7:20:e6:a2:19:00:d6:24:66:aa:7a:e4:f3:30:e8: d2:70:53:3c:7d:cf:54:97:d9:ee:d6:38:28:4a:40:04:b1:c4: bc:ef:14:88:cc:5f:01:38:1d:7b:a7:eb:52:f4:62:c9:af:61: f4:44:55:ab:41:be:bd:b0:9e:9c:04:cb:ee:03:a2:ea:3b:f4: 7c:1a:0f:f0:06:ea:b4:9f:47:8f:85:dd:d3:ae:54:08:47:15: f1:de:e9:2c:58:34:65:93:20:d9:fa:de:c2:c3:92:e9:8f:25: 6b:dc:d1:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDQjYxMTAvBgNVBAUTKDAxMTBCQjNBQjUwRTNBMEQ0NDkwQzMyMTAzQkJDNDA1 NERDNjgyMUUwHhcNMjQwNTIzMDExNDA1WhcNMjQwNTMwMDExNDA1WjAYMRYwFAYD VQQDEw02NjRlOTg1ZC0wMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DVx7zkY+dGHnBTKbY4jVboYR6TJ8ivJiacgoH1cna9ODlfWyjHQZZs5RXPC mRdL9jSpf3ImsWsLBUcKm7CAXwfW9/MKsbfmE/nTw3Jt9juvxCrIPbSDDSULUraI zMWyVeqtMG4p441CahY4wMECETlBHmf45B7cABv9wfB+P1I8X4K5ijmtex5HeUQO Th3POHJe4WG877Bnow6k09uw9rVVifAp2flk2hJwKNuvHlz0jB2BJGyiMCOzYwNp DZwMp/QW9dnkzhI7YKiGQu5S+KhnsRAYj+OtV/l/WLDF3w7pYM/mBGPzLOTiSa0K Ny7f5OK7+GIV9EFF7aAm4blswQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQhIuLE h1g2lgHe63oam9oj09R5MB8GA1UdIwQYMBaAFAEQuzq1DjoNRJDDIQO7xAVNxoIe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkNCNi8yQUI3Q0M1QUND RjExMUVCOTE0MjE5NThDNEY5QUUwMi9BUkM3T3JVT09nMUVrTU1oQTd2RUJVM0dn aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSQzdPclVPT2cxRWtNTWhBN3ZFQlUzR2doNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkNCNi8yQUI3Q0M1QUNDRjExMUVCOTE0MjE5NThDNEY5QUUwMi9BUkM3T3JVT09n MUVrTU1oQTd2RUJVM0dnaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl5ZkbMzamnUJqkwkiK10PaPQMSdmgZ9rgP+CMAxVnhvf93SVR4pf/ Nr7S6bwEcKxyKvVL39aomGmKnOMdrm1KqUR1NcS+fybk4f/mio5Tp/nDpsXRP963 9o+uGa5jDs+q7L20IFU0FA/2fCQMYKg3ZKxVM1WKMYVnOcn+XLCjxqMfxHWW/wcy Ex8CgU9z7nR25iqnIOaiGQDWJGaqeuTzMOjScFM8fc9Ul9nu1jgoSkAEscS87xSI zF8BOB17p+tS9GLJr2H0RFWrQb69sJ6cBMvuA6LqO/R8Gg/wBuq0n0ePhd3TrlQI RxXx3uksWDRlkyDZ+t7Cw5LpjyVr3NEr -----END CERTIFICATE-----Generated at Thu May 23 02:34:45 2024 by rpki-client on console-fra.rpki-client.org